This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft File: aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft (raw, json) Hash identifier: QZSaJI5OA7XtpJGGA00tyGIiRhDn5DpA41x9b8/SBiI= Subject key identifier: 7F:2E:50:77:10:17:2C:D7:3B:7C:30:7D:17:71:BA:A5:AE:90:15:75 Authority key identifier: 69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 Certificate issuer: /CN=A91DC146/serialNumber=690C729F18390564D670B18F7774754E5D279951 Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft Manifest number: 065D Signing time: Sun 28 Dec 2025 21:50:10 +0000 Manifest this update: Sun 28 Dec 2025 21:50:10 +0000 Manifest next update: Sun 04 Jan 2026 21:50:10 +0000 Files and hashes: 1: aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl (hash: lKyhZLaAyAl4KzvteLk9InZc1K03ipjke9xnxBAf1dA=) 2: 4BB44892AE1111EBB4C2DA11C4F9AE02.roa (hash: JNSnvB3lv0/9vnQPkUAqkaUeoo68hc8fXSyVzWlD/Po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:50:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC146, serialNumber=690C729F18390564D670B18F7774754E5D279951 Validity Not Before: Dec 28 21:50:10 2025 GMT Not After : Jan 4 21:50:10 2026 GMT Subject: CN=6951a612-fb5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:42:18:8f:b0:94:26:67:82:8c:35:d2:55: 3c:32:52:00:14:91:a6:14:28:b5:4f:5c:c8:1f:82: 04:7a:63:79:ec:a1:7f:de:7f:30:a6:88:91:52:31: ba:24:2f:4d:17:1a:83:25:68:41:8d:c9:5d:d0:d8: 23:3f:7e:49:b7:c3:d1:40:8d:f4:1a:6a:cf:7f:94: 62:c8:3d:9d:58:34:4b:a4:1f:9a:b1:e3:e0:1c:83: d1:c1:42:ca:07:24:06:d4:7e:2e:16:d9:b6:e5:f3: 5b:e1:a1:d8:84:96:c0:d8:04:ba:4f:d1:9f:28:1f: b8:e0:33:0d:de:93:96:53:fc:50:e9:c3:af:8e:b9: bb:2e:d0:9a:2d:c2:a8:b5:e2:47:ca:93:b8:a6:bd: 1e:99:13:d0:3e:aa:10:6c:b3:d1:57:aa:b8:73:ae: 2f:ad:90:8e:62:33:da:7a:7a:0f:6c:57:77:d4:9f: b5:6d:8b:07:ac:98:f8:cd:9c:09:2c:65:ee:2a:32: 57:ad:b3:37:b8:98:fc:e6:3c:9d:b0:e6:e6:b9:ef: 22:07:25:a6:85:fe:1d:70:d6:25:ab:e5:4e:98:b6: 4b:0f:36:ec:67:4d:04:84:f6:82:b7:a7:a9:8d:a2: 06:5d:fc:c0:0e:d0:12:5e:0f:f3:f8:ae:a5:fe:12: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2E:50:77:10:17:2C:D7:3B:7C:30:7D:17:71:BA:A5:AE:90:15:75 X509v3 Authority Key Identifier: keyid:69:0C:72:9F:18:39:05:64:D6:70:B1:8F:77:74:75:4E:5D:27:99:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQxynxg5BWTWcLGPd3R1Tl0nmVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC146/DAA76492AE0E11EB8ABA334DC4F9AE02/aQxynxg5BWTWcLGPd3R1Tl0nmVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:a3:41:42:33:b7:cd:18:7c:e3:95:31:29:c2:0d:51:24:c6: a8:36:6b:f9:71:9b:b5:4a:ac:11:2b:eb:ea:bf:bf:fa:f0:22: 23:a5:0a:04:26:fe:ae:a1:1f:06:1a:ba:5e:24:0f:26:16:d8: 11:3f:e6:30:50:04:99:b0:42:69:4f:1e:ed:dd:f5:de:69:a1: 4e:99:a5:dd:d0:05:17:57:e8:f1:7a:de:10:63:58:e2:4f:2d: d4:72:64:23:e8:a6:6f:92:ac:44:7d:1f:23:c3:e9:4c:f3:1b: 24:05:a2:b6:09:0f:9a:e8:3a:b6:9a:31:88:91:f3:db:f4:0f: df:08:4b:00:18:c4:94:32:9e:51:74:aa:bb:b8:94:34:40:80: 95:cc:30:47:ec:51:11:a4:a0:ba:19:dd:b9:02:5c:22:18:73: 51:bf:ae:03:67:ed:67:e5:56:de:17:b8:3a:f6:c4:95:32:5c: 52:ce:e1:0c:f6:5a:76:b4:f4:e7:d9:19:59:eb:a9:53:3c:33: 7d:36:ef:f8:a5:30:2f:54:06:64:27:7b:53:22:24:bf:36:fb: 63:8f:d1:96:ec:04:3e:68:2d:2b:06:6a:ad:18:fa:59:d9:3c: 96:b8:82:46:a7:33:c4:e8:24:e4:b4:6c:9a:7d:d0:1e:45:91: 91:26:81:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMxNDYxMTAvBgNVBAUTKDY5MEM3MjlGMTgzOTA1NjRENjcwQjE4Rjc3NzQ3NTRF NUQyNzk5NTEwHhcNMjUxMjI4MjE1MDEwWhcNMjYwMTA0MjE1MDEwWjAYMRYwFAYD VQQDDA02OTUxYTYxMi1mYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshRCGI+wlCZngow10lU8MlIAFJGmFCi1T1zIH4IEemN57KF/3n8wpoiRUjG6 JC9NFxqDJWhBjcld0NgjP35Jt8PRQI30GmrPf5RiyD2dWDRLpB+asePgHIPRwULK ByQG1H4uFtm25fNb4aHYhJbA2AS6T9GfKB+44DMN3pOWU/xQ6cOvjrm7LtCaLcKo teJHypO4pr0emRPQPqoQbLPRV6q4c64vrZCOYjPaenoPbFd31J+1bYsHrJj4zZwJ LGXuKjJXrbM3uJj85jydsObmue8iByWmhf4dcNYlq+VOmLZLDzbsZ00EhPaCt6ep jaIGXfzADtASXg/z+K6l/hJU5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8uUHcQ FyzXO3wwfRdxuqWukBV1MB8GA1UdIwQYMBaAFGkMcp8YOQVk1nCxj3d0dU5dJ5lR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzE0Ni9EQUE3NjQ5MkFF MEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJXVFdjTEdQZDNSMVRsMG5t VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FReHlueGc1QldUV2NMR1BkM1IxVGwwbm1WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzE0Ni9EQUE3NjQ5MkFFMEUxMUVCOEFCQTMzNERDNEY5QUUwMi9hUXh5bnhnNUJX VFdjTEdQZDNSMVRsMG5tVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyo0FCM7fNGHzjlTEpwg1RJMaoNmv5cZu1SqwRK+vqv7/68CIjpQoE Jv6uoR8GGrpeJA8mFtgRP+YwUASZsEJpTx7t3fXeaaFOmaXd0AUXV+jxet4QY1ji Ty3UcmQj6KZvkqxEfR8jw+lM8xskBaK2CQ+a6Dq2mjGIkfPb9A/fCEsAGMSUMp5R dKq7uJQ0QICVzDBH7FERpKC6Gd25AlwiGHNRv64DZ+1n5VbeF7g69sSVMlxSzuEM 9lp2tPTn2RlZ66lTPDN9Nu/4pTAvVAZkJ3tTIiS/Nvtjj9GW7AQ+aC0rBmqtGPpZ 2TyWuIJGpzPE6CTktGyafdAeRZGRJoH0 -----END CERTIFICATE-----Generated at Mon Dec 29 18:00:29 2025 by rpki-client